As in the official GitHub or whatever repo they’re using lists their aur package as an install message. So I’m not just downloading a potential clone/fake package with a similar name that could’ve been orphaned and taken over in the recent aur malware campaigns